1. Introduction

Soulbod ("we", "us", "our", or "Company") operates the Soulbod platform. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Personal Data

Email address, name, location, and account preferences. This information is used to provide and maintain our Service.

Health Data

Blood test results, genetic information, wearable device data, fitness metrics, and food intolerances. This is encrypted and stored securely. You control what data you share.

Device Integration Data

Data from Whoop, Withings, and Hevy. We only access data that you explicitly authorize through OAuth integrations.

Usage Data

Information about how you interact with the Service (pages visited, time spent, features used) to help us improve the platform.

3. Data Security

The security of your Personal Data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

All health data is encrypted at rest and in transit (TLS 1.3)
API keys and sensitive credentials are never stored in plain text
Regular security audits and penetration testing
HIPAA compliance measures for health information

4. Use of Data

Soulbod uses the collected data for various purposes:

To provide and maintain our Service
To notify you about changes to our Service
To provide customer support
To gather analysis or valuable information so that we can improve our Service
To monitor the usage of our Service
To detect, prevent and address technical and security issues

5. Sharing of Data

We do not sell, trade, or rent your Personal Data to third parties. We may share your information only in the following circumstances:

Service Providers: With vendors and contractors who assist us in operating the Service
Legal Requirements: When required by law or legal process
Business Transfers: In case of merger, bankruptcy, or acquisition
Your Consent: When you explicitly authorize us to share your information

6. Retention of Data

We will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations.

7. Your Rights

You have the following rights regarding your Personal Data:

Right to access your data
Right to correct inaccurate data
Right to request deletion of your data
Right to withdraw consent at any time
Right to data portability

To exercise any of these rights, please contact us at privacy@soulbod.com.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@soulbod.com

Address: Dubai, UAE